This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft
File:                     2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json)
Hash identifier:          MegiQhsZcAb6AgvA5iQQBv3fDim8M14TIdyl8qXia4s=
Subject key identifier:   57:45:FB:57:4B:F5:78:A3:0D:7A:97:89:B7:C3:0E:7D:0D:D0:3F:9C
Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D
Certificate issuer:       /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D
Certificate serial:       0650
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft
Manifest number:          064A
Signing time:             Sat 24 Jan 2026 21:56:46 +0000
Manifest this update:     Sat 24 Jan 2026 21:56:46 +0000
Manifest next update:     Sat 31 Jan 2026 21:56:46 +0000
Files and hashes:         1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: zi79C2G0nAJKj4QEnZRT06MkE82N0UavqPR3c1puqqE=)
                          2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: JTt1lcwJJ/VlJRR1mPyJ+td5e5c2alDgtGmRBoxCA5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl
                          rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D
        Validity
            Not Before: Jan 24 21:56:46 2026 GMT
            Not After : Jan 31 21:56:46 2026 GMT
        Subject: CN=6975401e-672a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:cb:cc:d7:75:b8:83:85:4f:67:0d:2e:33:
                    a1:41:cc:df:7b:8f:ef:51:b1:8b:66:c7:90:bc:ca:
                    d7:ad:1a:25:b3:4e:7a:87:21:82:5a:26:66:e9:da:
                    a1:f7:06:28:77:a6:db:9c:39:c7:4f:da:81:fe:64:
                    7b:e8:42:9c:84:81:cd:ac:c4:fb:19:80:55:b1:1d:
                    1c:9b:ed:ba:ef:4d:d4:e6:10:e5:ce:01:0f:4f:d6:
                    f3:9d:40:e2:fb:28:ee:b5:ae:ad:c4:df:c5:bc:9c:
                    55:93:4f:68:c3:ff:d1:7e:7e:e4:b8:90:55:57:80:
                    7f:cb:7a:94:6b:fa:fa:f8:c3:b5:d3:12:57:6e:57:
                    27:96:54:40:bf:0b:26:bd:1b:24:a5:96:e8:c1:de:
                    2d:f0:4f:b9:96:70:4d:87:63:5f:4d:61:20:17:33:
                    fb:e3:7b:af:b7:ee:6d:0a:2e:2a:65:51:5e:97:ad:
                    39:94:fd:45:4e:22:59:84:8f:25:36:b4:97:e0:d5:
                    fd:e9:14:84:c2:2f:0e:05:ba:6f:5b:1f:34:9b:38:
                    1b:d7:bc:f8:4f:38:0e:fd:4a:66:6c:0a:6d:bc:13:
                    c1:5e:34:aa:eb:04:e4:13:6d:3d:f1:3c:eb:14:67:
                    0b:19:32:e8:79:d2:b9:8e:3d:68:4c:cf:59:d6:55:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:45:FB:57:4B:F5:78:A3:0D:7A:97:89:B7:C3:0E:7D:0D:D0:3F:9C
            X509v3 Authority Key Identifier:
                keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:51:82:0d:42:07:ca:d4:6c:85:0e:1c:39:93:af:1c:c5:0e:
         56:c6:10:ac:7f:59:a8:c6:f1:a3:ca:62:00:45:bd:25:9f:92:
         50:a6:eb:d9:a8:56:4c:1b:39:07:d8:c4:f6:46:c3:bf:d0:d1:
         2e:a4:ca:1c:2a:25:00:ea:37:00:8c:45:64:85:ab:c3:f1:f9:
         93:dd:87:18:35:26:d2:14:53:c9:98:b1:b3:4b:37:39:7b:6d:
         b0:d0:0b:fa:da:2b:29:17:29:28:65:fe:3c:2a:11:dd:75:dd:
         30:f9:22:02:94:c1:79:17:cb:c1:91:ca:7e:7c:ef:3b:ec:71:
         6b:ac:7b:95:63:d8:ed:2f:0d:99:b3:f5:fe:ae:fd:48:19:dd:
         90:f8:37:1e:91:96:e8:45:93:f3:51:04:31:10:2d:9c:9d:40:
         36:35:b6:a2:71:2e:38:b9:9f:73:0c:78:2d:ff:29:e8:2a:70:
         ee:31:f5:91:7b:7a:8a:4d:84:08:29:9a:a7:6c:b7:87:38:ee:
         b7:c6:5d:6b:59:c0:54:bf:ff:28:e2:a9:cb:ab:4c:49:c8:09:
         30:63:f8:be:42:02:72:5b:cb:cb:9c:ef:cd:a4:8a:ea:3d:01:
         4b:05:b9:e3:85:db:45:ff:19:ef:53:73:bf:c2:47:95:6c:7b:
         dd:ad:7e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:52:29 2026 by rpki-client